Lantronix SCS1600 User manual

SCS1600 and SCS3200 User Guide
Part. No. 900-234
Rev. D December 2003

Copyright & Trademark
© 2003, Lantronix. All rights reserved. No part of the contents of this book may be
transmitted or reproduced in any form or by any means without the written permission of
Lantronix. Printed in the United States of America.
Ethernet is a trademark of XEROX Corporation. UNIX is a registered trademark of The
Open Group. Windows 95, Windows 98, Windows 2000, and Windows NT are
trademarks of Microsoft Corp. Netscape is a trademark of Netscape Communications
Corporation.
Contacts
Lantronix Corporate Headquarters
15353 Barranca Parkway
Irvine, CA 92618, USA
Phone: [phone]
Fax: [phone]
Technical Support
Phone: [phone] or 949-453-7198
Fax: [phone]
Online: www.lantronix.com/support
E-mail [email protected]
Sales Offices
For a current list of our domestic and international sales offices, go to the Lantronix web
site at http://www.lantronix.com/about/contact/index.html
Disclaimer & Revisions
Operation of this equipment in a residential area is likely to cause interference in which
case the user, at his or her own expense, will be required to take whatever measures
may be required to correct the interference.
Note: This product has been designed to comply with the limits for a Class A
digital device pursuant to Part 15 of FCC Rules. These limits are designed to
provide reasonable protection against such interference when operating in a
commercial environment. This equipment generates, uses, and can radiate radio
frequency energy, and if not installed and used in accordance with this guide,
may cause harmful interference to radio communications.
Changes or modifications to this device not explicitly approved by Lantronix will void the
user's authority to operate this device.
The information in this guide may change without notice. The manufacturer assumes no
responsibility for any errors that may appear in this guide.
Date Rev. Part No. Comments
4/02 C 900-234 Reformatted manual; added section on SSH Connections; added
information about Break Safe feature.
12/03 D 900-234 Added new features: SSH connections, enhanced security, break
sequences, modem mode, boot gateway, DHCP, and additional
authentication for Web browser. Expanded list of cables and added list
of adapters available from Lantronix. Updated contacts and warranty
information.
i

Contents
Copyright & Trademark ________________________________________________ i
Contacts ___________________________________________________________i
Disclaimer & Revisions ________________________________________________i
Contents __________________________________________________________ ii
1: Introduction to the SCS Family ___________________________ 1-1
Features _________________________________________________________1-1
Protocol Support ___________________________________________________1-2
2: Connections and Physical Requirements___________________ 2-1
Connections_______________________________________________________2-1
Pinouts __________________________________________________________2-2
RJ45 Serial Connectors __________________________________________2-2
RJ45 to DB25 __________________________________________________2-3
RJ45 to DB9 ___________________________________________________2-4
Cables and Adapters________________________________________________2-5
Specifications _____________________________________________________2-6
Power ________________________________________________________2-6
Temperature ___________________________________________________2-6
Humidity ______________________________________________________2-6
Altitude _______________________________________________________2-6
3: Installation ____________________________________________ 3-1
Connecting the SCS ________________________________________________3-1
Assigning an IP Address _____________________________________________3-2
EZWebCon Method______________________________________________3-2
DHCP Method__________________________________________________3-4
Command Line Method___________________________________________3-4
ARP and Ping Method____________________________________________3-5
UNIX Host_____________________________________________________3-5
Windows Host__________________________________________________3-5
Changing the IP Address Permanently_______________________________3-5
BOOTP or RARP Reply Method____________________________________3-6
Configuring the SCS ________________________________________________3-6
EZWebCon Method______________________________________________3-6
Web Browser Method ____________________________________________3-8
ii

Telnet Login Method _____________________________________________3-1
Command Line Method___________________________________________3-1
4: Application Setup ______________________________________ 4-1
Login Banner Pages ________________________________________________4-1
Menus ___________________________________________________________4-1
Connecting ____________________________________________________4-1
Enabling Menu Mode ____________________________________________4-2
Creating the Menu_______________________________________________4-3
Using Menu/Connection Commands ________________________________4-4
Enabling Menu Mode for a Port ____________________________________4-5
Using the Menu_________________________________________________4-6
Remote User Dial-Up _______________________________________________4-7
Break Sequences __________________________________________________4-8
Serial Breaks___________________________________________________4-8
Alternate Break Sequences _______________________________________4-8
Modem Mode______________________________________________________4-9
Event Port Logging and Email Notification ______________________________4-10
Creating an Email Site __________________________________________4-11
Dial-Out ISP Connection ____________________________________________4-12
Com Port Redirector _______________________________________________4-13
SSH Connections _________________________________________________4-14
Defining Supported SSH Connections ______________________________4-14
Creating an AUTHORIZED_KEYS File______________________________4-14
Shared Key Authentication Process ________________________________4-15
Setting up RSA Shared Key Authentication (for SSHv1) ________________4-15
Setting up DSA Shared Key Authentication (for SSHv2) ________________4-16
Setting up Username/Password Authentication (SSHv1 or SSHv2)________4-16
Forming SSH Incoming Connections (Unix and Non-Unix)_______________4-17
Non-Unix Platforms_____________________________________________4-17
UNIX Platforms ________________________________________________4-17
Security Enhancements_____________________________________________4-18
Incoming Security ______________________________________________4-18
Port User Restrictions___________________________________________4-18
5: Troubleshooting________________________________________ 5-1
Technical Support __________________________________________________5-1
LEDs ____________________________________________________________5-2
iii

Power-up Troubleshooting ___________________________________________5-3
BOOTP Troubleshooting_____________________________________________5-4
RARP Troubleshooting ______________________________________________5-4
Boot Prompt Commands_____________________________________________5-4
Flash_________________________________________________________5-5
Flush NVR_____________________________________________________5-5
Help__________________________________________________________5-5
Init 451 _______________________________________________________5-5
Set Server BOOTP {Enabled, Disabled}______________________________5-5
Set Server Hardware xx-xx-xx _____________________________________5-6
Set server IPAddress ip_address ___________________________________5-6
Set server loadhost ip_address_____________________________________5-6
Set Server RARP {Enabled, Disabled} _______________________________5-6
Set Server Secondary ip_address __________________________________5-6
Set Server Software filename ______________________________________5-6
Set Server Bootgateway ip_address_________________________________5-5
Show Server ___________________________________________________5-6
6: Updating Software______________________________________ 6-1
Choosing the Right Software File ______________________________________6-1
Obtaining Software _________________________________________________6-1
Via the Web ___________________________________________________6-1
Via FTP_______________________________________________________6-1
Reloading Software_________________________________________________6-2
EZWebCon Method______________________________________________6-2
FTP Method ___________________________________________________6-2
Web Interface Method____________________________________________6-2
Command Line Methods__________________________________________6-3
TFTP Method __________________________________________________6-3
MOP _________________________________________________________6-3
Troubleshooting Flash ROM Updates___________________________________6-4
A: Compliance and Warranty Information_______________________1
Compliance Information_______________________________________________ 1
Warranty __________________________________________________________ 2
iv

1
1: : I In nt tr ro od du uc ct ti io on n t to o t th he e S SC CS S F Fa am mi il ly y
The Lantronix SCS family of Secure Console Servers enables IT professionals to
remotely and securely configure and administer servers, routers, switches, telephone
equipment, or other devices equipped with a serial port.
Features
 TCP/IP compatibility
 Remote networking
− Dial-in access
− Dial-out ISP connections
− Event port logging
− Email event notification
− Authentication
− Accountability
 Browser-based configuration
− HTML pages in firmware
− Server configuration via any browser
 EZWebCon utility
− Provides initial SCS configuration
− Extracting and downloading configuration to multiple SCS units.
 Command line editing
 Context-sensitive online help
 Re-loadable operating code
− Stored in Flash ROM
− Upgradeable using FTP, TFTP, and EZWebCon
 Diagnostics for network and serial line troubleshooting
 Break safe for Sun Solaris systems (Solaris Ready Certified)
Note: See Using Menu/Connection Commands for information on how to send
intentional breaks to connected equipment.
1-1

SCS1600/3200 User Guide 1: Introduction to the SCS Family
Protocol Support
The SCS supports the TCP/IP network protocol as well as:
 SSH, Telnet, and Rlogin for connections in and out of the SCS
 DNS and WINS for text-to-IP address name resolution
 SNMP for remote monitoring and management
 FTP for file transfers and firmware upgrades
 TFTP for firmware upgrades
 BOOTP, RARP, and DHCP for IP address assignment
 HTTP for easy browser-based configuration
 NTP for time synchronization and authentication
 NAT for enabling private networks to share a connection to the Internet.
SSH (Secure Shell): A secure transport protocol based on public-key cryptography.
Telnet: This terminal protocol provides an easy-to-use method of creating terminal
connections to any network host supporting Telnet.
Rlogin: Allows you to initiate a TCP/IP login session.
DNS (Domain Name Servers): Lets a network nameserver translate text node names
into numeric IP addresses.
SNMP (Simple Network Management Protocol):Commands that allow system
administrators to monitor and manage nodes on a LAN (Local Area Network) and
respond to queries from other network hosts. One community name can be configured
with read/write access. Refer to the SCS Reference Manual for SNMP configuration
instructions.
BOOTP, RARP, and DHCP: Methods for automatically assigning an IP address and
network settings.
NTP (Network Time Protocol):Used to synchronize time on networked computers and
equipment.
NAT (Network Address Translation): Allows private networks to share a single
connection to the Internet. With Port Mapping, specific IP Ports can be mapped from the
Internet to a private IP address and port.
1-2

2
2: : C Co on nn ne ec ct ti io on ns s a an nd d P Ph hy ys si ic ca al l R Re eq qu ui ir re em me en nt ts s
This chapter provides a physical description of the unit and requirements for installing
and connecting it. The topics include:
 Connections
 Pinouts
 Cables and Adapters
 Specifications
Connections
The SCS1600 and SCS3200 are distinguished by the number of asynchronous RJ45
serial ports they are equipped with. The SCS1600 has 16 ports, while the SCS3200 has
32 ports. Both units include an AUI connector and a UTP port (10/100BASE-T) for
Ethernet connections. They both support baud rates between 300 and 230,400 bits per
second.
SCS1600 Front Panel
2-1

SCS1600/3200 User Guide 2: Connections and Physical Requirements
SCS3200 Front Panel
Note: The Reset button returns the SCS to its factory default configuration when
you press and hold it during the power-up and boot process. Resetting to factory
default will enable DHCP.
Pinouts
The SCS3200 has 32 asynchronous RJ45 serial ports. The SCS1600 has 16
asynchronous RJ45 serial ports. Pinout information for these ports is discussed in the
following sections.
RJ45 Serial Connectors
Lantronix servers are RS-423 compliant and are thus limited by the equipment at the
remote end of the serial line. If the SCS is connected to an RS-232 device, it is subject to
the RS-232 limits shown below. If connected to an RS-423 device, it is subject to the RS-
423 limitations.
RS-232 lines are limited to 15m (50 ft) in length at 9600 baud, and 2 m (6 ft) at 115.2K
baud. RS-423 lines are limited to 300m (1000 ft) at 9600 baud, 85m (260 ft) at 115.2K
baud, and 40m (120 ft) at 230.4K baud. They will generally work at longer lengths.
The pinout of the serial ports is displayed below.
2-2

SCS1600/3200 User Guide 2: Connections and Physical Requirements
RJ45 Serial Connector
RJ45 to DB25
If you are connecting an RJ45 port to a DTE device (such as a terminal) that has a DB25
connector, you will need to use an RJ45-DTE DB25 adapter. To connect an RJ45 port to
a DB25 connector on a DCE device, you will need an RJ45-DCE DB25 adapter. The
pinout information for both connections is shown below.
Pinouts of RJ45-DB25 Connections
2-3

SCS1600/3200 User Guide 2: Connections and Physical Requirements
RJ45 to DB9
The arrows in the figure below represent the direction of the signal. Both the transmit and
receive ground signals on the SCS connector are wired to the signal ground on a DB9
adapter.
RJ45-DTE DB9 Adapter
2-4

SCS1600/3200 User Guide 2: Connections and Physical Requirements
Cables and Adapters
Lantronix offers the following accessory cables and adapters for use with the SCS
products. Contact Lantronix for details.
Lantronix Cable Part Numbers
Part Description
500-101 Cable: 6' (1.8M) RJ45 to DB9 Male connects to DCE Device (modems, csu/dsu,
etc.)
500-102 Cable: 6' (1.8M) RJ45 to DB25 Male connects to DCE Device (modems, csu/dsu,
etc.)
500-103 Cable: 6' (1.8M) RJ45 to DB9 Female connects to DTE Device (terminals, printers,
console ports, etc.)
500-104 Cable: 6' (1.8M) RJ45 to DB25 Female connects to DTE Device (terminals, printers,
console ports, etc.)
500-137 Cable: 10’ (3M) RJ45-RJ45 Rolled
200.0062 Cable: 6.6’ (2M) RJ45 to RJ45 Cat5
200.0063 Cable: 16.4’ (5M) RJ45 to RJ45 Cat5
200.0064 Cable: 32.8’ (10M) RJ45 to RJ45 Cat5
2000065 Cable: 49.2’ (15M) RJ45 to RJ45 Cat5
200.0112 Cable: 100’ (30M) RJ45 to RJ45 Cat5
Adapters listed below are pinned for use with straight through Cat5 cable.
Lantronix Adapter Part Numbers
Part Description
200.2066A Adapter: RJ45 to DB25M DCE for ETS, SCSxx00, SCSxx05
200.2067A Adapter: RJ45 to DB25F DCE for ETS, SCSxx00, SCSxx05
200.2069A Adapter: RJ45 to DB9M DCE for ETS, SCSxx00, SCSxx05
200.2070A Adapter: RJ45 to DB9F DCE for ETS, SCSxx00, SCSxx05
200.2071 Adapter: RJ45 to DB25M DTE for ETS, SCSxx00, SCSxx05
200.2072 Adapter: RJ45 to DB25F DTE for ETS, SCSxx00, SCSxx05
200.2073 Adapter: RJ45 to DB9M DTE for ETS, SCSxx00, SCSxx05
200.2074 Adapter: RJ45 to DB9F DTE r for ETS, SCSxx00, SCSxx05
200.2225 Adapter: RJ45 to RJ45 Rolled Coupler
2-5

SCS1600/3200 User Guide 2: Connections and Physical Requirements
Specifications
Power
The unit can operate using 100 to 240 Volts AC without switches or jumpers.
Voltage 95 to 250 Volts AC 3-wire single phase, autoranging
Frequency 47 to 63HZ
Operating Current 0.5 Amps (maximum
Power consumption 35 Watts
Temperature
Note: Rapid temperature changes may affect operation. Do not operate near heating or
cooling devices or areas that open to the outdoors.
Operating range 5° to 50° C (41° to 122° F)
Storage range -40° to 66° C (-40° to 151° F)
Max. temp change 20° C (36° F) per hour
Humidity
Operation 10% to 90% non-condensing
Ideal 40% to 60%
Storage 10% to 90% non-condensing
Altitude
Note: For operations above 2.4 km (8,000 ft), decrease the operating temperature rating
by 1.8°C for each 1,000 m (1°F for each 1,000 ft).
Operation 2.4 km (8,000 ft)
Storage 9.1 km (30,000 ft)
2-6

3
3: : I In ns st ta al ll la at ti io on n
This chapter covers all of the steps needed to get the SCS online and working.
EZWebCon is the preferred method for initial configuration, but this chapter also explains
alternative methods such as the command line interface. The full command set is
discussed in the SCS Reference Manual. Before you begin, consider the following
points:
 The IP address must be configured before any TCP/IP functionality is available.
You cannot use the web browser interface until an IP address is assigned.
 Most configuration commands require privileged user status. You must enter the
Set Privileged command to become the privileged user. The default privileged
password is system.
Connecting the SCS
Your SCS should be rack mounted in a secured environment. Refer to the following
illustration of a typical installation.
Installation Overview
3-1

SCS1600/3200 User Guide 3: Installation
1. Mount or place the SCS in a secure location.
2. Connect your active serial devices to the SCS's RJ45 serial connectors.
3. Connect the Ethernet network to the SCS via the 10/100BASE-T port or the AUI port,
not both ports.
4. Connect the power cord to a power outlet.
5. Set the power switch to ON.
6. Confirm the following:
a) The green Power LED lights up immediately.
b) After about 20 seconds, the green Link LED lights up.
c) After about 30 seconds, the green OK LED blinks every two seconds.
Assigning an IP Address
You must assign an IP address to the SCS before you can perform any configurations.
We recommend you use the first method listed below, EZWebCon.
EZWebCon Method
EZWebCon is the recommended method for initially configuring the SCS. EZWebCon is
located on the distribution CD-ROM. Installation instructions are provided in the README
file.
Use the following steps to assign an IP address using EZWebCon:
1. Start EZWebCon.
2. On the menu bar, click Action Assign IP Address. The Assign IP address –
Select Device window displays.
Select the Device
3. Select the SCS that appears in the next window and click Next. The Assign IP
address -Assignment Method Select window displays.
3-2

SCS1600/3200 User Guide 3: Installation
Select the Assignment Method
4. Select Assign Specific IP and click Next. The Assign address – IP Settings window
displays.
Enter IP Settings
5. Enter the IP-related settings:
a) For IP Address, enter the desired IP address.
b) For Subnet Mask, change the values provided only if you wish to use a mask
other than the default. The default value should be correct in most cases.
6. For Gateway Address, select None.
7. Click Next. The Assign IP address – Assignment Status window displays.
3-3

SCS1600/3200 User Guide 3: Installation
Assign IP
8. Click the Assign IP... button.
9. Wait for instructions from EZWebCon.
For assistance once EZWebCon is running, refer to EZWebCon's online help.
DHCP Method
If DHCP is enabled on the SCS, the SCS will accept an IP address, gateway address,
and subnet mask from a DHCP host. DHCP can be enabled or disabled with the following
command:
Set/Define Server DHCP [Enabled | Disabled]
DHCP is disabled in production. Resetting the unit to factory defaults via the reset button,
command line, or web interface will enable DHCP. (See page.3-1for information on
resetting hardware or page 5-5 for information on the Flush NVR command.)
Command Line Method
To assign an IP address to the SCS via a terminal:
1. Attach a terminal to the first serial port (port 1) and press Enter. You see a Local>
prompt at which you can enter configuration commands.
2. Once you are connected, become the privileged user and enter the Define IP
IPaddress command.
Note: The default privileged password is system.
Entering IP Address at Local Prompt
Local> SET PRIVILEGED
Password> system (not echoed)
Local>> DEFINE IP IPADDRESS 192.0.1.228
3. Reboot the SCS for the IP address to take effect.
3-4

SCS1600/3200 User Guide 3: Installation
4. If the SCS encounters an Ethernet network problem while booting, it sends an alert
message to port and waits ten seconds to detect serial port activity before attempting
to finish booting. If you press Enter when the error message is displayed, you will
access the Boot> prompt.
Note: For more information on Boot Configuration Program (BCP)
commands, see Troubleshooting.
ARP and Ping Method
The ARP/ping method is available under UNIX and Windows. If the SCS has no IP
address, it sets its address from the first directed IP packet it receives.
When the SCS receives the ping packet, it notices that its IP address is not set and
sends out broadcasts to see if another node is using the specified address. If no
duplicate is found, the SCS uses that IP address and responds to the ping packet.
UNIX Host
1. Create an entry in the host's ARP table and substitute the SCS's hardware address
and intended IP address.
2. Ping that IP address. This process typically requires super-user privileges.
Entering ARP and Ping (UNIX)
# arp -s 192.0.1.228 00:80:a3:xx:xx:xx
% ping 192.0.1.228
Windows Host
1. Type ARP -A at the DOS command prompt to verify that there is at least one entry in
the ARP table.
2. If there is no other entry beside the local machine, ping another IP machine on your
network to build the ARP table. This has to be a host other than the machine on
which you are working.
3. Use the following commands to ARP the IP address to the SCS and make the SCS
acknowledge the IP assignment.
Entering ARP and Ping (Windows)
C:\ ARP -S 192.0.1.228 00-80-A3-XX-XX-XX
C:\ PING 192.0.1.228
Note: If the ARP command works, replies from the IP address display.
Changing the IP Address Permanently
With the ARP method, the SCS does not save the learned IP address permanently. This
procedure is just a temporary measure to enable a web browser or allow an administrator
to Telnet into the SCS. Once logged in, the administrator can enter the Define IP
IPaddress command to make the address permanent.
3-5

SCS1600/3200 User Guide 3: Installation
Changing the IP Address
% telnet 192.0.1.228 7000
# access (not echoed)
Lantronix Version n.n/n (yymmdd)
Type Help at the `Local_>' prompt for assistance.
Username> [gopher]
Local> SET PRIVILEGED
Password> system (not echoed)
Local>> DEFINE IP IPADDRESS 192.0.1.228
Note: The default login password is access. The default privileged password is
system. After you have entered both passwords and gained access, change
those passwords from their default settings.
BOOTP or RARP Reply Method
A host-based BOOTP or RARP server can provide information for the SCS to use to
configure an IP address. See the host-based documentation pages for configuration
information. Keep in mind that many BOOTP daemons do not reply to a BOOTP request
if the download file name in the configuration file does not exist. If this is the case, create
a file in the download path to get the BOOTP daemon to respond.
BOOTP and RARP are enabled by default on the SCS. If you wish to disable them, use
the Define Server BOOTP Disabled and Define Server RARP Disabled commands.
Configuring the SCS
Once you have assigned the IP address, you can configure your SCS using any of the
methods discussed below:
EZWebCon Method
If you have just assigned the IP address using EZWebCon, you may want to continue
using EZWebCon to launch the web browser interface for SCS configuration. The
EZWebCon user interface allows you to set up menus and change passwords without
needing to know commands.
Once the IP address for your SCS is set, perform the following steps to launch the web
browser interface from EZWebCon.
1. Click to select the device you wish to configure.
2. On the menu bar, click Action Manage. This action launches the web browser
interface to your device.
3-6

SCS1600/3200 User Guide 3: Installation
Authentication on the Web Browser Interface
3. Type login (default username) in the Username field and access (default login
password) in the Password field.
4. Click the Login button. The Server Configuration window displays.
Server Configuration Window
5. Select a link from the left navigation column to configure the SCS. The root
(privileged) level authorization window displays.
3-7